IN THE CLAIMS: 

1-25. (cancelled) 

26. (new) A method to protect from unauthorized access an electronic data 
object created to store information, comprising the steps of: 

generating an electronic data object identifier which identifies a content of 
information stored in the data object; 

determining an electronic user identifier of an operating personnel seeking 
access to the data object, said user identifier being different than said data object 
identifier; 

determining an access right dependent on the data object identifier and also 
on the user identifier; and 

allowing the access by the operating personnel to the data object dependent 
on the access right. 

27. (new) The method according to claim 26 further comprising the steps of: 
providing a plurality of access right categories; and 

determining an association of the user identifier with at least one of the 
access right categories, the access right being determined dependent on the 
association of the user identifier with the at least one access right category. 

28. (new) The method according to claim 26 further comprising: 
providing a plurality of access right categories; and 

determining an association of the data object identifier with at least one of the 
access right categories, the access right being determined dependent on the 
association of the data object identifier with the at least one access right category. 
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29. (new) The method according to claim 26, further comprising storing 
medical data referring to a person in the data object. 

30. (new) A method to protect from unauthorized access an electronic data 
object created to store information, comprising the steps of: 

generating an electronic data object identifier which identifies a content of 
information stored in the data object; 

providing a plurality of access right categories; 

determining an electronic user identifier of an operating personnel seeking 
access to the data object, said user identifier being different than said data object 
identifier; 

determining an association of the user identifier with at least one of the 
access right categories, the access right being determined dependent on the 
association of the user identifier with the at least one access right category, and also 
determining an association of the data object identifier with at least one of the access 
right categories, the access right being determined dependent on the association of 
the data object identifier with the at least one access right category; 

determining the access right dependent on the data object identifier and also 
dependent on the user identifier; and 

allowing the access of the data object dependent on the access right. 

31. (new) A data processing system to protect from unauthorized access 
electronic data objects created to store information, comprising; 

a user group module storing user identifiers of operating personnel; 

a data object category module storing a plurality of access right categories; 
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an access right module; 

a data object store storing said data objects, each of said data objects having 
an electronic data object identifier which identifies a content of information stored in 
the respective data object; and 

an access control module connected to said data object store, access right 
module, data object category module, and user group module to determine an 
access right to at least one of the data objects dependent on the data object 
identifier and also dependent on the user identifier, and allowing an access by the 
operating personnel of the at least one data object dependent on the access right. 

32. (new) A system according to claim 31 designed as a medical 
workstation. 

33. (new) A system according to claim 32 wherein at least one of the data 
objects stores medical data referring to a person. 

34. (new) A system according to claim 33 wherein the access right module 
provides an association of the user identifiers with access right categories. 

35. (new) A system according to claim 33 wherein said data object category 
module provides an association of the data object identifiers with access right 
categories. 
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